Which two features in Aruba CX switches help in network segmentation and security enforcement? (Select two)

Dynamic Segmentation and EVPN/VXLAN are fundamental features in Aruba CX switches for modern network segmentation and security. Dynamic Segmentation centralizes policy enforcement by tunneling user traffic from an access switch to an Aruba Gateway. This allows for consistent, role-based policies to be applied to users and devices, regardless of their connection point, effectively creating micro-segments. EVPN/VXLAN creates a network overlay, allowing Layer 2 segments (VXLAN Network Identifiers or VNIs) to be extended across a Layer 3 underlay. This is a highly scalable method for creating macro-segments, isolating traffic between different tenants or departments across a campus or data center.

A. Virtual Switching Framework (VSF) is a stacking technology that combines multiple switches into a single logical device for simplified management and redundancy, not for traffic segmentation.
D. Smart Rate Ports are a physical layer feature that provides multi-gigabit connectivity (1/2.5/5/10 GbE) over standard cabling; they do not contribute to logical network segmentation.

1. Aruba Dynamic Segmentation Solution Guide: (Page 4, "What is Aruba Dynamic Segmentation?") "Dynamic Segmentation unifies policy enforcement for wired and wireless network access across campus and branch networks... It automates the configuration of network access policies for every user and device, segmenting traffic with a centralized policy enforcement point." This directly supports the role of Dynamic Segmentation in segmentation and security enforcement.

2. ArubaOS-CX 10.12 VXLAN Guide: (Page 7, "Introduction to VXLAN") "Virtual Extensible LAN (VXLAN) is a network virtualization technology that provides a framework for creating virtualized Layer 2 networks that span physical Layer 3 networks... EVPN is a BGP control plane for VXLAN that provides a scalable and efficient way to build and manage VXLAN-based overlay networks." This confirms EVPN/VXLAN as a core segmentation technology.

3. ArubaOS-CX 10.12 Virtual Switching Framework (VSF) Guide: (Page 7, "VSF introduction") "The Virtual Switching Framework (VSF) allows you to stack up to 10 supported switches into a single logical device with a single IP address." This defines VSF's purpose as virtualization of the switch chassis, not the network.